Testing if I can squash this way (#1)

* Fixed XSS resulting from markdown() method
This commit is contained in:
Chris Niedzwiedz 2017-01-09 12:27:11 -06:00 committed by GitHub
parent c552d08b8e
commit d2e177cac4
7 changed files with 61 additions and 1 deletions

View file

@ -35,4 +35,8 @@ FactoryGirl.define do
end
end
end
factory :event_xss, parent: :event do
abstract { '<div id="divInjectedElement"></div>' }
end
end

View file

@ -6,4 +6,8 @@ FactoryGirl.define do
description { Faker::Lorem.paragraph }
website_link { Faker::Internet.url }
end
factory :lodging_xss, parent: :lodging do
description { '<div id="divInjectedElement"></div>' }
end
end

View file

@ -45,4 +45,9 @@ FactoryGirl.define do
end
end
end
factory :user_xss, parent: :user do
biography '<div id="divInjectedElement"></div>'
end
end